Andreas Gruenbacher e817c2f33e selinux: Don't sleep inside inode_getsecid hook ...

The inode_getsecid hook is called from contexts in which sleeping is not
allowed, so we cannot revalidate inode security labels from there. Use
the non-validating version of inode_security() instead.

Reported-by: Benjamin Coddington <bcodding@redhat.com>
Signed-off-by: Andreas Gruenbacher <agruenba@redhat.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <paul@paul-moore.com>

2016-02-19 16:29:19 -05:00

..

include

selinux: export validatetrans decisions

2015-12-24 11:09:41 -05:00

ss

selinux: export validatetrans decisions

2015-12-24 11:09:41 -05:00

.gitignore

…

avc.c

Merge branch 'next' of git://git.infradead.org/users/pcmoore/selinux into next

2015-08-15 13:29:57 +10:00

exports.c

…

hooks.c

selinux: Don't sleep inside inode_getsecid hook

2016-02-19 16:29:19 -05:00

Kconfig

selinux: change CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE default

2015-10-21 17:44:25 -04:00

Makefile

…

netif.c

Merge commit 'v3.17' into next

2014-11-19 21:32:12 +11:00

netlabel.c

net: add skb_to_full_sk() helper and use it in selinux_netlbl_skbuff_setsid()

2015-11-08 20:56:38 -05:00

netlink.c

…

netnode.c

…

netport.c

…

nlmsgtab.c

selinux/nlmsg: add a build time check for rtnl/xfrm cmds

2015-04-13 13:09:44 -04:00

selinuxfs.c

selinux: export validatetrans decisions

2015-12-24 11:09:41 -05:00

xfrm.c

netfilter: Remove spurios included of netfilter.h

2015-06-18 21:14:32 +02:00